Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/9A31551A007911EFB9E2570FC4F9AE02.roa
File: 9A31551A007911EFB9E2570FC4F9AE02.roa (raw, json)
Hash identifier: /WkI9P2YYh4Vg+ygrnYMsFRJwTBS5KbFAzWLwGmGka8=
Subject key identifier: 4E:6C:F9:D2:EF:83:A1:96:36:27:02:D1:19:D8:D1:ED:B9:5A:58:66
Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial: 3426
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/9A31551A007911EFB9E2570FC4F9AE02.roa
Signing time: Mon 22 Apr 2024 07:26:15 +0000
ROA not before: Mon 22 Apr 2024 07:26:15 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 136908
IP address blocks: 103.250.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 May 2024 07:25:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13350 (0x3426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Validity
Not Before: Apr 22 07:26:15 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=66261117-b82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:8e:e1:e7:70:72:14:c3:76:3f:1d:69:6a:
e6:7f:26:df:83:94:e0:1c:13:e9:80:14:54:2b:06:
6a:71:38:b5:95:a0:d7:bd:3d:3e:2c:19:c8:d7:41:
eb:4d:e5:57:21:df:9e:1b:51:0c:9f:82:53:03:4f:
a4:62:e1:f2:ac:63:84:4b:e4:d6:16:5a:23:4e:5a:
ac:b1:eb:42:71:b3:d1:ed:d9:3d:72:a8:7c:ad:5c:
ed:24:6a:f5:3b:f4:fe:f8:26:70:e7:96:7c:8d:d8:
d0:85:67:cf:6f:71:c1:f4:10:b4:5e:63:19:1f:ad:
52:58:da:de:2a:ba:cf:e4:bf:f8:b5:ba:07:1e:b1:
82:ed:02:67:5a:5e:54:85:79:c7:20:29:e2:80:f5:
51:ea:ed:2a:1c:3f:27:e6:d1:1a:e6:0a:cf:4d:89:
d4:94:92:cf:1d:ef:cf:5d:20:f9:e1:5b:4c:4b:b6:
a6:ac:02:7f:20:70:c9:76:96:7d:a9:ad:cf:44:92:
56:64:23:8a:bb:00:a8:ef:98:0a:08:29:61:77:72:
a8:ea:53:78:91:d4:3a:c0:28:08:23:b3:d0:85:85:
1c:f3:07:80:a3:ed:1d:e1:60:76:3c:69:bb:b8:17:
0f:02:44:3a:bc:9b:70:ba:18:b9:38:08:bc:02:90:
c8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6C:F9:D2:EF:83:A1:96:36:27:02:D1:19:D8:D1:ED:B9:5A:58:66
X509v3 Authority Key Identifier:
keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/9A31551A007911EFB9E2570FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.250.134.0/24
Signature Algorithm: sha256WithRSAEncryption
96:bf:2e:ce:35:0e:e5:07:c9:b2:ab:0c:13:9b:be:91:06:6b:
47:82:74:41:cc:b1:aa:c1:63:79:8c:07:6f:03:de:24:db:b0:
02:05:82:41:2c:c8:59:6b:30:52:9d:1d:1f:0d:1d:1e:fd:c3:
da:ef:f1:91:94:0b:0f:b6:05:e7:d9:e7:20:63:00:9e:6e:3e:
f4:37:b6:f9:e9:18:9e:21:21:3d:82:8a:a0:66:cb:18:2b:be:
d3:80:c9:c8:4a:32:1f:20:db:fa:1d:cb:59:ec:a0:1a:8e:35:
c7:03:fb:13:09:39:e5:c5:41:ed:c7:6c:fc:1a:54:08:46:b9:
40:77:a7:3f:37:99:49:d5:34:27:e1:08:d8:7c:8d:ae:65:bb:
fb:11:e7:34:20:70:68:df:1a:28:26:40:bd:65:a8:ff:cd:5a:
63:9b:5c:a2:43:00:6c:43:07:6a:77:37:d8:82:f5:93:9a:97:
4c:8d:c6:e7:64:13:f3:1f:4e:bd:d1:d3:a6:dc:2a:ea:c4:cb:
66:11:94:e5:7b:95:8c:d0:0d:ba:e9:38:d1:f4:c0:af:2b:f3:
ce:3b:58:b3:d3:69:3a:30:ee:b1:61:aa:6c:64:e9:62:14:e1:
8e:78:ea:5c:bc:2e:7b:7b:9b:7b:5e:f6:7c:16:06:2e:0e:55:
be:77:0b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:33 2024 by rpki-client on console-fra.rpki-client.org